ipmitest

ipmitest Shell script for testing the IPMI cipher type zero authentication bypass vulnerability CVE-2013-4784 The IPMI is a standardized computer system interface used by system administrators for out-of-band management of computer systems and monitoring of their operation. It is a way to manage ...

nginxhack

Esta es una herramienta que utiliza un exploit llamado CVE-2013-2028 para ejecutar un bind shell en el servidor objetivo que ejecuta Nginx 1.3.9 o 1.4.0. Se puede descargar aquí necesitarás ejecutarlo desde la línea de comandos Uso:...

nginxpwn

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow This repository contains the nginx 1.4.0 source code as well as precompiled binaries with and without stack cookies. There's also a Vagrantfile for easy setup. Announcement and patch:...

CVE-2013-1965

CVE-2013-1965 A proof of concept exploit for the CVE-2013-1965 vulnerability affecting Apache Struts 2...

Richsploit

Richsploit Richsploit: Kit de explotación para RichFaces. Resumen Richsploit puede utilizarse para explotar endpoints JSF mediante RichFaces. Todas las versiones desde 3.1.0 en adelante son vulnerables. root@kitploit: usage: Richsploit -e,--exploit 0: CVE-2013-2165 1: CVE-2015-0279 2:...

libget_user_exploit

This library read in kernel memory by CVE-2013-6282 exploit...

libmsm_acdb_exploit

Original code is written by @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...

nginx-1.4.0

nginx-1.4.0 Para el análisis de CVE-2013-2028 exploit: exp-nginx.rb binario para construcción rop: nginx...

w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 Ejecución remota de código en w3 total cache cve 2013-2010 Uso: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" Salida: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import requests...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

CVE-2013-2165

CVE-2013-2165...

CVE-2013-0212

CVE-2013-0212 版本：https://github.com/openstack/glance/tree/4b768a4a847a0f5c857f4fe3f3bca720da9b3949...

CVE-2013-0156

Original Script Reference For more details on the original exploit script, refer to the gist link CVE-2013-0156 CVE-2013-0156 Exploit Script This script is specifically designed to solve the challenge on PentesterLab for the CVE-2013-0156 exploit. You can access the challenge here: PentesterLab -...

Fix-WinVerifyTrustSignatureValidationVuln

修复WinVerifyTrust签名验证漏洞 修复WinVerifyTrust签名验证漏洞，CVE-2013-39001，QID-3783322 此修复适用于64位Windows计算机 此PowerShell代码是修复该漏洞的一种方式——除了创建.reg文件并使用reg import 导入新注册表项之外。 完整打包脚本： 如果 HKLM:\Software\Microsoft\Cryptography\Wintrust\Config 路径不存在，则创建路径和项。 如果找到该注册表项，则显示该项的结果——不做任何操作等。 预期的新的注册表项类型为：REGSZ 以下内容摘自MSRC -...

cve-2013-3900-remediation-report

修复报告：CVE-2013-3900 – Windows Server 2019（Azure VM）上的WinVerifyTrust漏洞 概述 在最近一次使用Tenable Nessus进行的经过身份验证的漏洞评估中，在托管于Microsoft Azure 的Windows Server 2019 虚拟机上检测到了CVE-2013-3900。此次扫描利用了管理员凭据，从而能够深入检查系统的配置和注册表设置。...

CVE-2013-4322_PoC

CVE-2013-4322PoC A simple python script PoC demonstrating the slow POST chunked transmission vulnerability...

CVE_2013_2186

CVE20132186 Source code for CVE-2013-2186...

CVE-2013-3900_Remediation_PowerShell

CVE-2013-3900RemediationPowerShell Script para realizar cambios en el registro para corregir CVE-2013-3900. Incluye una opción para deshacer los cambios en caso de que algo falle en su entorno. Pasos Descargue el script, ejecútelo con privilegios de administrador y reinicie el equipo...

CVE-2013-2006

CVE-2013-2006 版本: https://github.com/openstack/keystone/blob/d43e2a51a1ed7adbed3c5ddf001d46bc4a824ae8...

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...